@whalent/agent-core@0.3.471
Core runtime for Whalent Agent
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe source establishes a concrete agent-control capability that writes command-bearing MCP entries, but does not establish install-time execution, credential theft, or a payload attack. This warrants a warning for explicit agent configuration mutation.
Static reason
One or more suspicious static signals were detected.
Trigger
A caller invokes the MCP management register action.
Impact
A permitted caller or compromised agent session could persist a command that an agent platform may later execute.
Mechanism
The action forwards caller-provided command, arguments, and environment to the MCP-server injection routine, which writes an agent server entry.
AI rationale
The source establishes a concrete agent-control capability that writes command-bearing MCP entries, but does not establish install-time execution, credential theft, or a payload attack. This warrants a warning for explicit agent configuration mutation.
Evidence
dist/mcp.cjs.claude.json
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The package declares a command-line core entry point and distributes the MCP bundle.
- The MCP bundle accepts a requested server name, command, arguments, and environment, then registers that server in an agent configuration.
- The bundle includes logic that adds a server definition to Claude configuration.
Evidence against
- No npm lifecycle hook is declared in the inspected package metadata.
- The configuration mutation is reached through an MCP management action rather than an install hook.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Source & flagged code
7 flagged · loading sourcedist/mcp.cjsView file
1#!/usr/bin/env node
L2: 'use strict';var a0_0x50722e=a0_0x38b8;(function(_0x4ee694,_0x446175){var _0x2a8b53=a0_0x38b8,_0xd99cb3=_0x4ee694();while(!![]){try{var _0x294705=-parseInt(_0x2a8b53(0x2db))/0x1+-p...
L3: || (${_0x101476} == "string" && ${_0x55d22c} && ${_0x55d22c} == +${_0x55d22c})`)[_0x516dc2(0x1c7)](_0xad5395,(0x0,_0x4275fb['_'])`+${_0x55d22c}`);return;case'integer':_0x30501d[_0x...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/mcp.cjsView on unpkg4|| (${_0x101476} === "string" && ${_0x55d22c} && ${_0x55d22c} == +${_0x55d22c} && !(${_0x55d22c} % 1))`)[_0x516dc2(0x1c7)](_0xad5395,(0x0,_0x4275fb['_'])`+${_0x55d22c}`);return;cas...
L5: || ${_0x101476} === "boolean" || ${_0x55d22c} === null`)['assign'](_0xad5395,(0x0,_0x4275fb['_'])`[${_0x55d22c}]`);}}}function _0x16d5e7({gen:_0x4d165b,parentData:_0x3b6b69,parentD...
L6: missingProperty: ${_0x59102b},
Medium
Findings
3 High7 Medium5 Low
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
LowEvaldist/mcp.cjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @whalent/agent-core@0.3.471.
See all versions of @whalent/agent-core for other recorded verdicts.
- Review the evidence and your use of @whalent/agent-core@0.3.471 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.